Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e2d5853-1236-4948-a8cb-08da685bc1eb.roa
File:                     9e2d5853-1236-4948-a8cb-08da685bc1eb.roa (raw, json)
Hash identifier:          zclkysbRcHTppjU4T2EIG/YQsSPJ1oje541ByPG9xQc=
Subject key identifier:   BB:9C:BF:02:A2:3A:8B:2D:76:51:2B:5E:2F:65:8E:67:F5:3C:0B:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       12988D9E724EE74E355EF09A70A88BD71C6FB88A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e2d5853-1236-4948-a8cb-08da685bc1eb.roa
Signing time:             Mon 20 Oct 2025 01:41:36 +0000
ROA not before:           Mon 20 Oct 2025 01:41:36 +0000
ROA not after:            Mon 24 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        108.158.44.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:98:8d:9e:72:4e:e7:4e:35:5e:f0:9a:70:a8:8b:d7:1c:6f:b8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 20 01:41:36 2025 GMT
            Not After : Nov 24 23:59:59 2025 GMT
        Subject: serialNumber=df3343e6541167177fcb344e56f827bea5eb1cb0b4cfc49392fd5f0f46633f8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:15:c8:87:7b:71:2f:4c:00:3e:7a:22:8f:
                    75:44:b0:a1:5a:93:f4:ba:f1:3b:23:23:e5:23:b0:
                    de:e5:5e:2d:bc:8f:77:51:01:a0:1a:06:4e:b0:7e:
                    38:a2:8a:8c:ad:73:22:ad:01:73:eb:f5:07:4e:41:
                    b8:e0:55:fb:6b:3b:c2:22:b0:87:a8:c0:9f:a6:c5:
                    d5:18:01:f8:dc:b2:25:25:56:10:51:f3:a5:30:18:
                    f1:76:3c:d1:4b:be:49:38:53:57:ba:26:e0:29:04:
                    c2:81:a1:d2:6e:5d:1a:ea:52:a4:f1:c7:b0:5e:ef:
                    0a:6c:c5:9b:ac:0a:23:3f:79:98:e2:f5:f9:19:50:
                    a6:07:95:00:a2:eb:45:17:96:c7:e3:0e:e7:bc:1b:
                    42:cc:cc:89:3b:f5:6c:ef:c6:ac:7b:f2:e3:93:fa:
                    bd:92:23:13:52:c5:a0:a6:19:99:9c:63:04:4d:96:
                    03:9d:7c:56:bf:a6:55:ed:1f:2d:b7:78:bd:4f:b3:
                    5e:13:55:8d:38:21:8e:a4:de:46:99:16:93:28:92:
                    7e:21:df:92:c1:6e:84:6c:1c:30:fd:fa:45:de:cf:
                    52:26:12:78:7c:93:cc:e9:69:76:51:ea:93:41:e4:
                    00:7f:a0:52:87:b7:18:29:dd:16:7d:73:43:04:c5:
                    dd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9C:BF:02:A2:3A:8B:2D:76:51:2B:5E:2F:65:8E:67:F5:3C:0B:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e2d5853-1236-4948-a8cb-08da685bc1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.158.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:bb:20:07:1e:6e:47:43:fb:0e:35:dc:9f:cd:6a:fd:ef:26:
         21:3f:06:f7:e6:34:f1:ef:6b:aa:84:61:fa:9d:8a:26:23:b4:
         4b:9b:eb:02:33:cd:47:08:a5:2a:0e:f1:23:40:48:e8:90:c5:
         8c:c7:04:a6:c1:3a:ab:da:bc:33:f6:0e:e6:53:57:b8:51:f0:
         ca:22:8a:91:1e:aa:1c:7d:83:a8:92:b7:11:91:66:11:6f:2e:
         65:9a:14:82:9f:ea:87:14:91:12:a1:f6:77:a8:47:5a:77:b6:
         b6:45:f9:d7:80:a7:c0:9a:71:1c:b4:2b:f1:51:06:4b:0f:07:
         67:55:55:00:81:ca:63:3d:5b:b9:4c:6a:58:43:9a:c3:29:bf:
         5c:52:98:cb:ae:45:4b:6c:f1:01:ed:b1:28:4a:86:c1:da:ba:
         09:14:e6:89:90:c6:f1:2a:49:4b:88:7e:85:64:a7:09:78:d6:
         67:45:cd:d3:fc:b5:ac:ab:08:75:1b:90:e0:0e:01:a3:94:30:
         32:2c:9f:98:a9:87:61:55:55:80:07:e4:63:f7:54:72:0a:58:
         83:c9:94:e9:f7:25:d0:fd:d0:5e:89:20:59:ef:2d:14:0e:2e:
         a3:13:86:31:87:a2:47:2a:1a:5d:e4:bb:b4:0d:1c:e6:16:04:
         e4:49:af:57
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEpiNnnJO5041XvCacKiL1xxvuIowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDE0MTM2WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZjMzNDNlNjU0MTE2NzE3N2ZjYjM0NGU1NmY4MjdiZWE1
ZWIxY2IwYjRjZmM0OTM5MmZkNWYwZjQ2NjMzZjhlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpDhXIh3txL0wAPnoij3VEsKFak/S68TsjI+UjsN7lXi28
j3dRAaAaBk6wfjiiioytcyKtAXPr9QdOQbjgVftrO8IisIeowJ+mxdUYAfjcsiUl
VhBR86UwGPF2PNFLvkk4U1e6JuApBMKBodJuXRrqUqTxx7Be7wpsxZusCiM/eZji
9fkZUKYHlQCi60UXlsfjDue8G0LMzIk79Wzvxqx78uOT+r2SIxNSxaCmGZmcYwRN
lgOdfFa/plXtHy23eL1Ps14TVY04IY6k3kaZFpMokn4h35LBboRsHDD9+kXez1Im
Enh8k8zpaXZR6pNB5AB/oFKHtxgp3RZ9c0MExd3jAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUu5y/AqI6iy12USteL2WOZ/U8CxswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzllMmQ1ODUzLTEyMzYtNDk0OC1hOGNiLTA4ZGE2ODViYzFlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFsniwwDQYJKoZIhvcNAQELBQADggEBAKi7IAcebkdD+w413J/Nav3vJiE/
BvfmNPHva6qEYfqdiiYjtEub6wIzzUcIpSoO8SNASOiQxYzHBKbBOqvavDP2DuZT
V7hR8MoiipEeqhx9g6iStxGRZhFvLmWaFIKf6ocUkRKh9neoR1p3trZF+deAp8Ca
cRy0K/FRBksPB2dVVQCBymM9W7lMalhDmsMpv1xSmMuuRUts8QHtsShKhsHaugkU
5omQxvEqSUuIfoVkpwl41mdFzdP8tayrCHUbkOAOAaOUMDIsn5iph2FVVYAH5GP3
VHIKWIPJlOn3JdD90F6JIFnvLRQOLqMThjGHokcqGl3ku7QNHOYWBORJr1c=
-----END CERTIFICATE-----